ProHoster > Articles on: Yuri Gagarin

Author: Yuri Gagarin

A technical specialist at ProHoster with over six years of experience in server administration, VPN solutions, and network security. I manage infrastructure setup and support, monitor service stability, and implement solutions to protect client data. I also contribute to performance optimization and compliance with modern security and privacy requirements.

Vulnerabilities in Matrix clients that allow the exposure of end-to-end encryption keys.

Posted on

Vulnerabilities (CVE-2021-40823, CVE-2021-40824) have been identified in most client applications for the decentralized communication platform Matrix, allowing access to keys used for transmitting messages in end-to-end encrypted (E2EE) chats. An attacker, having compromised one user in the chat, can decrypt messages that were previously sent to that user from vulnerable client applications. Successful exploitation requires access to the recipient's account […]

In Firefox 94, output for X11 will default to using EGL.

Posted on

The nightly builds that will form the release of Firefox 94 have incorporated a change that includes a new rendering backend for graphical environments using the X11 protocol by default. This new backend is notable for using EGL for graphics output instead of GLX. It supports open OpenGL drivers Mesa 21.x and proprietary NVIDIA drivers 470.x. Proprietary OpenGL drivers from AMD are not yet […]

Chrome update 93.0.4577.82 with fixes for 0-day vulnerabilities

Posted on

Google has released an update for Chrome 93.0.4577.82, which fixes 11 vulnerabilities, including two issues that are already being exploited by attackers (0-day). Details are not yet disclosed, but it's known that the first vulnerability (CVE-2021-30632) is caused by a flaw that leads to a buffer overflow in the JavaScript engine V8, while the second issue (CVE-2021-30633) exists in the implementation of the Indexed DB API and is related to […]

Autumn update of ALT p10 starter kits

Posted on

The second release of starter kits on the Alt Ten platform has been published. These images are suitable for experienced users who prefer to determine their own application package list and configure the system (even creating their own derivatives) for starting work with a stable repository. As composite works, they are distributed under the GPLv2+ license. Options include a basic system and one of the environments […]

New exploitation techniques for Spectre vulnerabilities in Chrome.

Posted on

A group of researchers from American, Australian, and Israeli universities has proposed a new side-channel attack technique to exploit Spectre-class vulnerabilities in browsers based on the Chromium engine. The attack, codenamed Spook.js, allows attackers to bypass site isolation mechanisms by running JavaScript code and read the contents of the entire address space of the current process, that is, accessing the data of pages that are loaded […]

HashiCorp has temporarily suspended the acceptance of changes from the community for the Terraform project.

Posted on

HashiCorp explained the reason for the recent addition to the open source configuration management platform Terraform repository regarding the temporary suspension of review and acceptance of pull requests submitted by community members. The note was perceived by some participants as a crisis in Terraform's open development model. Terraform developers quickly reassured the community, stating that the note was misunderstood and was added merely for […]

The MidnightBSD project server was hacked.

Posted on

The developers of the MidnightBSD project, which is creating a desktop-oriented operating system based on FreeBSD with elements ported from DragonFly BSD, OpenBSD, and NetBSD, have warned users about the discovery of traces of a hack on one of their servers. The breach was accomplished by exploiting a vulnerability, CVE-2021-26084, found in late August in the proprietary collaboration engine Confluence (provided for free by Atlassian) […

The developers of the MidnightBSD project, which is developing a desktop-oriented operating system based on FreeBSD with elements ported from DragonFly BSD, OpenBSD, and NetBSD, have warned users about the detection.

Posted on

The Revolt project is developing a communication platform aimed at creating an open-source alternative to the proprietary messenger Discord. Like Discord, the Revolt platform is focused on creating spaces for organizing communication among communities and groups with shared interests. Revolt allows users to launch their own server for communication and, if necessary, integrate it with a website or communicate using available client […

Release of Ultimaker Cura 4.11, a package for preparing models for 3D printing

Posted on

A new version of the Ultimaker Cura 4.11 package is available, providing a graphical interface for preparing models for 3D printing (slicing). Based on the model, the program defines the working scenario of the 3D printer when applying each layer sequentially. In the simplest case, it is sufficient to import the model in one of the supported formats (STL, OBJ, X3D, 3MF, BMP, GIF, JPG, PNG), select the settings for speed, material, and quality, and […

Microsoft has released an update for the Linux distribution CBL-Mariner

Posted on

Microsoft has released an update for the CBL-Mariner 1.0.20210901 distribution (Common Base Linux Mariner), which is being developed as a universal base platform for Linux environments used in cloud infrastructure, edge systems, and various Microsoft services. The project aims to unify the Linux solutions used within Microsoft and simplify the maintenance of Linux systems for various purposes. The project's developments are distributed under the MIT license. In the new release: […

Release of Wine 6.17 and Wine Staging 6.17

Posted on

The experimental branch of the open implementation of WinAPI — Wine 6.17 has been released. Since the release of version 6.16, 12 bug reports have been closed and 375 changes have been made. The most significant changes are: Improved support for high-DPI screens in built-in applications. The WineCfg program has been converted to PE (Portable Executable) format. Continued preparation for the implementation of the GDI system call interface. […]

Vulnerability in Ghostscript exploited via ImageMagick

Posted on

A critical vulnerability (CVE-2021-3781) has been identified in Ghostscript, a toolset for processing, converting, and generating documents in PostScript and PDF formats. This vulnerability allows arbitrary code execution when processing specially crafted files. Emil Lerner initially pointed out the issue, discussing the vulnerability on August 25 at the ZeroNights X conference in St. Petersburg (his presentation covered how Emil […]

« to the beginning 443 444 445 446 447 448 449 450 451 452 to the end »
Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster